Hands-On Azure Tutorials, Terraform Labs and Cloud Workshops.

Build and validate a private Azure Container Apps platform with Terraform, private endpoints, private DNS, managed identity, Key Vault, Front Door Private Link, and WAF enforcement.

Build and validate an Azure Network Security Perimeter with Terraform, managed identities, Storage, Key Vault, transition-mode access logs, enforced denials, and explicit Zero Trust recovery.

Build and validate an Azure platform landing zone with Terraform, Azure CLI, management groups, inherited policy, RBAC, centralized logging, and safe subscription onboarding.

Administer a private Linux VM through Azure Bastion with no public VM IP, short-lived Microsoft Entra SSH certificates, Defender JIT access, and auditable sessions.

Build a private Azure SQL path through hub-spoke networking, intentionally break DNS, repair Private DNS links and records, and validate bidirectional resolution with managed identity.

Build an Azure Policy-as-Code governance lab with Terraform and AzAPI. Stage a North Europe canary, audit before Deny, remediate tags and Blob diagnostics, add a scoped exemption, detect drift, and finish with a clean plan.